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Abstract 

Maximum rank distance codes denoted MRD-codes are the equiv- 
alent in rank metric of MDS-codes. Given any integer q power of a 
prime and any integer n there is a family of MRD-codes of length 
n over GF(q n ) having polynomial-time decoding algorithms. These 
codes can be seen as the analogs of Reed-Solomon codes (hereafter de- 
noted RS-codes) for rank metric. In this paper their subspace subcodes 
are characterized. It is shown that hey are equivalent to MRD-codes 
constructed in the same way but with smaller parameters. A spe- 
cific polynomial-time decoding algorithm is designed. Moreover, it is 
shown that the direct sum of subspace subcodes is equivalent to the 
direct product of MRD-codes with smaller parameters. This implies 
that the decoding procedure can correct errors of higher rank than the 
error-correcting capability. Finally it is shown that, for given parame- 
ters, subfield subcodes are completely characterized by elements of the 
general linear group GL n (GF(q)) of non-singular <?-ary matrices of size 
n. 

1 Introduction 



This work was initiated due to the great similarity between RS-codes and 
the family of MRD-codes initially published in [§]. It was also due to the 
constant interest of research in the study of codes derived from RS-codes, 
particularly subfield subcodes of RS-codes and more recently subspace sub- 
code of RS-codes. Subspace subcodes or subgroup subcodes consist of the set 
of codewords whose components belong to a specific subspace or subgroup 
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of the additive group alphabet of the code These particular subcodes 
are in general not linear but simply additive. 

In the case of RS-codes abundant literature is available especially on 
subfield subcodes, that is when the considered subspace is a subfield of the 
alphabet field. Indeed RS-codes and derived families (GRS-codes for in- 
stance) form a very popular family of codes. Some of the most studied codes 
can be seen as particular subfield subcodes of RS-codes or GRS-codes ( Al- 
ternant codes, binary Goppa codes and BCH-codes for example ) ITH] . 
In cryptography also they play an important role, for instance in McEliece 
public-key cryptosystem which uses in its design the family of binary Goppa 
codes [HO. 

Concerning more general subcodes like subspace subcodes of RS-codes, 
research on the subject was initiated in 1992 [22j. One of the objects of the 
research is to provide longer character-oriented codes than RS-codes, that is 
to build codes with good parameters, but whose symbol length is controlled, 
smaller than the extension degree of the field. 

In general however, even the simple question of the dimension of the 
subfield subcodes and their exact minimum distance remains open, although 
some bounds are derived from bounds or equalities on parameters of the par- 
ent RS-codes (HlEHm. Concerning subspace subcodes, the same questions 
arise and again some bounds are obtained from RS-codes. More specifically, 
it was shown that their cardinality depended on the structure of the subspace 
of the alphabet field, relatively to the action of the Probenius automorphism 

PUCE]. 

An additional problem the user of subspace subcode must cope with is the 
encoding of the code. Since these codes are not linear but simply additive, 
there is no generator matrix and therefore no systematic procedure can be 
built. In the case of bit shortened RS-codes a systematic encoding procedure 
was designed [22] • In a more general case of MDS codes an fast but not 
completely optimal procedure was designed in [23- The principle consist of 
considering a codeword of length n over GF(q n ) as an m x n g-ary matrix 
and by putting information on some subblock of the matrix, parities on some 
other block and some relations must be satisfied on the remaining positions. 
However since only lower bound on the cardinality of the codes are known, 
these encoding procedures do not take into account the additional bits that 
could be encoded and therefore are not optimal. 

In the same way as RS-codes in Hamming metric the family of MRD- 
codes constructed in [6J can be efficiently used for decoding in rank met- 
ric, for example, whenever the errors occur along some rows or columns of 
arrays, which happens along tapes [22 ED]- Moreover, properties of rank 
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metric have interesting cryptographic applications, in particular in the de- 
sign of McEliece-like cryptosystems, see [HI H|- Namely, for the same set 
of parameters general purpose decoding algorithms in rank metric have a 
much higher complexity compared to general purpose decoding algorithms 
for Hamming metric |3*j 1181 12*]. Therefore the MRD-codes or codes derived 
from MRD-codes can be of interest in designing cryptosystems. Several fast 
polynomial-time decoding algorithm up to the error-correction capability ex- 
ist whose design that all have their equivalent in decoding RS-codes. There 
are Euclidian and Berlekamp Massey like algorithms 1^ EH] as well as 
Welch-Berlekamp like algorithms, [Tlj I13j. 

Let GF(q) be the base field and GF(q n ) be an extension field of degree 
n of GF(q). In the following we will indifferently consider GF(q n ) as the 
field or the n-dimensional vector space over GF(q). We recall properties of 
rank metric, [6J. 

Definition 1 (Rank of a vector) 

Let e = (ei, . . . ,e n ) G GF(q n ) n . The rank over GF(q) of e is the rank 
of the n x n q-ary matrix obtained by extending every component ei over a 
basis ofGF(q N )/GF(q). It is denoted Rk(e\GF(q)). 



The rank over GF(q) of vector e is denoted in the following by Rk(e) 

define [i] d = q % , when i > and [i] d = q n+t when i < 0. 
A [n, k, d]-code over the field GF{q n ) has generator matrix 
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where g\, . . . , g n G GF{q n ) are linearly independent elements of GF{q n )/GF{q). 
A parity-check matrix H of the code has the same structure as G that is 



H 



V h 



[d-2] 



h [d-2] 
I In 



(1.2) 



for h\, . . . , h n G GF(q n ) linearly independent over GF(q). The hi's of such 
codes can be easily found from the g^s [H]. 

The code Q with parity-check matrix H or generator matrix G has min- 
imum rank distance exactly d = n — k + 1. This code satisfies the Singleton 
like equality for rank metric, and since Hamming metric is thinner than 
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rank metric, this implies equally that it is a MDS code. There are sev- 
eral polynomial-time decoding algorithms decoding these codes up to their 
error-correction capability EH1 EE] • It is remarkable to note that 
these algorithms are can be retranscripted from the algorithms decoding 
Reed-Solomon codes by replacing the notion of polynomial by the notion of 
linearized polynomials, that is inherent to the very definition of rank metric. 
Such similarity and such strong structure raises the natural question of the 
structure of subcodes of MRD-codes. 

The goal of this paper is to show that, despite the fact that the family of 
MRD-codes with parity-check matrix 1)1.211 are very similar to RS-codes, they 
are much more structured, and all the question concerning the dimension of 
subspace subcodes, their exact minimum rank distance and the design of 
specific encoding-decoding procedures can be solved quite simply. 

The paper is organized as follows: In a first part we show that subspace 
subcodes of a [n, k = n — d+ 1, d) MRD-code over a m-dimensional subspace 
of GF{q n ) can be put in one-to-one correspondence with a (m, k' = m — 
d+l,d) MRD-code over GF(q n ). More specifically we construct a bijective 
rank preserving GF(q)-lme&ic mapping between the two codes. The mapping 
enables to build specific encoding and decoding procedures. 

In a second part we are interested in subcodes obtained from the direct 
sum of subspace subcodes and we show that it is possible to construct a 
rank-preserving mapping putting these subcodes in bijection with the direct 
product of MRD-codes. In that case we show that it is sometimes possible 
to correct beyond the error-correcting capability of the codes. 

In a third part we deal with subfield subcodes of MRD-codes. We show 
that they are similar to the direct product of MRD-codes over the subfield, 
and that up to the action of the general linear group GL n (GF(q)) on the 
components of the codewords, they can be uniquely defined. This implies 
in particular that results from second part apply and that sometimes it is 
possible to decode them beyond the error-correcting capability of the codes. 

2 Subspace subcodes of rank codes 

Let Q be the code with generator matrix t| 1 - 1 1) and parity-check matrix 1|1.2|L 
Consider V m a m-dimensional subspace of GF{q n ). Let 

def 

{Q\V m ) = {c = (d, . .. ,cn) e Q | cj e V m , j = 1, ...,n} 

Definition 2 

(£?|Kn) is called subspace subcode of Q over V m . 
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(£7|^m) is formed of the codewords whose components lie in the alphabet 
formed by the subspace V m . In a first section we construct a mapping be- 
tween (<5|Krt) and a so-called parent code CQ(V m ). This code is MRD and 
we show that the mapping is bijective, preserves GF(g)-linearity and the 
rank. In a second part we describe encoding and decoding procedures for 
subspace subcodes. 

2.1 Characterization of subspace subcodes 

Let c = (ci 3 . . . , c n ), Cj £ V m for all j. Let b = (/3i, . . . , f3 m ) be a basis of 
V m . Vector c has a unique decomposition under the form 



where U = (£7^. 



it satisfies the parity-check equations 



bU = {pi,...,(3 m )U, (2.3) 
'. Vector c is a codeword if and only if 



cH T = (/3 1 ,...,/? m )C/H T = 0. (2.4) 

Hence (£7|Kn) is characterized by the fixed basis b = . . . , (3 m ) and by 
the set ofmxn matrices U with coefficients in GF(q) satisfying condition 
l|2.4|l . Solving 112.411 is equivalent to solving 



(/?!,••• , An) 



Vl 



where 



V v r , 
(vi, ...,v m )- 



\d-2] 



[d-2] 



(h 1 ,...,h n )U t . 



(2.5) 



(2.6) 



Given any vector (vi, ■ ■ ■ , v m ) € GF(q n ) m , there exists a unique mx n q-aiy 
matrix U such that (v±, . . . , v m ) = (hi, . . . , hnjU 1 . The eth column of U is 
given by the vector obtained from the representation of V{ over the basis 
(hi, ■ ■ -,h n ). 



Condition (|2,5|) is equivalent to 

(vi, 



nj 

"in 



n-d+2] 



0: 



0. 



(2.7) 



Since Pi, ... , (3 m are linearly independent, equation Ij2.7|l implies that v = 
(vi, . . . ,v m ) is a codeword of a GF(g")-linear MRD-code with parameters 
[m, m — d + 1, d]. The code with parity-check matrix 



5 



pT ■■■ A 



nj 
'm 



i R [n-d+2] R [n-d+2] 
\ Pi ' ' ' P"i 



(2.8) 



is denoted CQ(V n , 



Definition 3 (Parent Code) 

The code CQ(V m ) is called the parent code of (Q\V m ). 

We now prove the following proposition establishing that any subspace 
subcode of a MRD-code of full length is uniquely characterized by a MRD- 
code with the same minimum distance but with smaller parameters. 

Proposition 1 

Let b = (Pi, . . . , (3 m ) be a basis ofV m over GF(q), and let h = (hi, . . . , h n ) 
be the vector defined in equation The mapping 



f b : V£ - GF(q n ) m 
c = hU i — ^ / b (c) = MP 

satisfies the following properties 

1. /b is a GF(q)-linear bijective mapping. 

2. /b preserves the rank of vectors over GF(q) , that is Rk (f\ 3 (c)\GF(q)) = 
Rk(c\GF(q)). 

3. h(G\V m )=CG(V m ). 

4- fh and f^ 1 can be computed in nm multiplications in GF(q) and n 
additions in GF(q n ). 

Proof. 

1. Since hi,...,h n are linearly independent over GF(q), it follows that 
/b is a bijection. Let c = hU and d = hV be vectors of By 
definition of /b, we have /b(c + d) = h(U + V) = /b(c) + /b(d). 

2. Let c = hU. Since (3\,. ■ ■ ,/3 m are linearly independent, we have that 
Kk(c\GF(q)) = Bk(U), where Bk(U) is the rank of matrix U. More- 
over, since /b(c) = hlP, and hi,...,h n are linearly independent, we 
have that 

Rk(f b (c)\GF(q)) = Rk(C/*) = Rk(U) = Rk(c\GF(q)) 
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3. The fact that /b (£7|V^) = CQ(V m ), follows directly from the definition 
of mapping f h . 

4. Any vector of is given by a q-ary m x n matrix U. Therefore, com- 
puting /b is merely computing the product of vector h = (hi, . . . ,h n ) 
by matrix U. This can be done in nm multiplications in GF(q) and 
n additions in GF(q m ). Conversely, computing (y±, . . . ,v m ) corre- 
sponds to finding the unique q-axy matrix U such that («]_,..., v m ) = 
(hi, . . . , hnjU 1 , and then compute hU . 

We deduce the following corollary. 

Corollary 1 

(£7|V^) is a (n, M, D)- additive code, where 

• D = d, 

m M = q n i m - D + 1 ) , 

Both statements of the corollary imply that (£/|V^i) is optimal for the 
rank metric [19J. 

2.2 Coding and decoding of subspace subcodes 

Thanks to the mapping /b described in proposition Q we design an efficient 
encoding procedure for subspace subcodes of MRD-codes. From Corollary ^ 
the number of g-ary digits that can be encoded is equal to n(m— d+1). Hence 
any information vector can be considered as a vector of length (m — d+1) 
over GF(q n ). 

Let x = (xi, . . . , Xm^d+i) £ GF(q n ) m ~ d+l be an information vector. Let 
Gv m be a generator matrix of the parent code CG(V m ). 
The encoding procedure is the following: 

1. Encoding in the parent code: Compute y = xGV m G CQ(V m ); 

2. Transferring in the subcode: Compute c = / b ~ 1 (y). 

The complexity of the encoding procedure consists of (m — d + \)m mul- 
tiplications in GF(q n ) if we neglect the operations over the base field GF(q). 

Let y = c+e be a received vector where c G (£/|l/ m ) and e has coefficients 
in V m and rank t < [_(d — 1) /2j . There are two manners of decoding: 

• In the code Q by using the standard decoding algorithms for Q. The 
complexity is ~ (d — 1 + t)n + i 3 multiplications in GF(q n ) if we take 
the decoding algorithm described in [Jj. 
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• By decoding in the parent code CG(V m ): We have /t>(y) = /b(c) + 
/ b (e), where / b (c) G CQ(V m ), and Rk(f h (e)\GF(q)) = t. Therefore, 
by correcting /b(y) in CQ(V m ), one recovers /b(c) and /b(e) and by 
computing the inverse function one gets c and e. The complexity of 
the algorithm is ~ {d — l)m + tn + i 3 multiplications in GF(q n ). 

2.3 Direct sum of subspace subcodes 

In the previous section, we showed that subspace subcodes of MRD-codes 
are in some sense isomorphic to MRD-codes of smaller length. Prom sub- 
space subcodes, we build codes corresponding to the direct sum of subspace 
subcodes. The mapping /b can be extended to this direct sum. 

Consider a sequence V mi , . . . , V mu of subspaces of GF(q m ) of dimensions 
nii that two-by-two do not intersect except on the zero-vector (this implies 
in particular that Ya=i m i < n )- For every subspace V mi we fix a basis bj. 

As before (Q\V mi ) denotes the subspace subcode of the code Q restricted 
to vectors with coordinates in V mi . Let 

M d = (Q\V mi ) © • • • © (Q\V mu ) C Q 

be the subcode of Q consisting of the direct sum of the subspace subcodes 
(Q\V mi ), that is 

M = {c = Cl + + C | ci G (G\V mi ),...,c u G (g\V mu )}. (2.9) 

We define the mapping /( bl) ... ! b u ) from restricted mappings /b^ as defined in 
proposition Q 

^©■■■©^ -» GF(q n ) m ' x • • • GF(q n ) m - 

c = Cl + --- + c u ^ /( bl ,...,b u )(c) = (/bi(ci ),..., /b„(c u )) 

Proposition 2 

/(bi,...,b«) is GF{q) -linear, bijective and preserves the rank. 

Proof. 

Gi ? (g')-linearity and bijectivity come from the fact that /(b lv ..,b u ) is a 
direct product of GF(g)-linear, bijective mappings. 

Concerning the rank property, any vector c G © • • • © V^ u can be 
uniquely written under the form 

c = biC/i H h h u ll u , 
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where JJj's are nnii q-ary matrices. This can be rewritten under the form 



(bi 



,b u ) 



Ui 



Since, for i = 1, . . . ,u vector spaces Vi form a direct sum, this implies that 
the components of vector (h>i, . . . ,h u ) are linearly independent over GF(q). 
Therefore the rank of c over GF(q) is equal to the rank of matrix 



U 



( Ui 



Therefore, since /(bi,...,b u )( c ) = hZY*, we have 

Rk(/ (bli ... jb . u) (c)|GF(g)) = Rk(c\GF(q)). 



Let CQ(M) be the code with parity-check matrix, 



H(M) 



H, 



(2.10) 



We prove the following proposition 
Proposition 3 f {hl ,..., hu) (M) = £G{M). 
Proof. 

Let H be the parity-check matrix of Q under the form (|1,2|) . Let c = 
Ci + • • • + c u € M. Since for all i = 1, . . . , u, c, £ (Q\V mi ) we have for 
all i = l,...,u, CiH = 0. This is equivalent to /b^(c.t)Hy m . = 0, for all 
i = 1, . . . , u. 

For this reason CQ(M.) is called parent code of M.. As it is also a direct 
product of MRD-codes with smaller parameters, we deduce the following 
corollary. 



Corollary 2 M. is a (n, M, D)-code, where 
• M = g n Er=i( m ^-( d - 1 )). 
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D = d. 



From /(b!,...,^) we deduce efficient specific encoding and decoding pro- 
cedures for code M.. 

Let x be g n -ary vector of length J27=i m i ~ u (d ~ !)• 

1. Vector x is first divided into u blocks Xj each of length rrii — d + 1. 

2. Any subvector Xj is encoded into Cj 6 (Q \ V mi ), using the procedure 
described in section l2~2l with mapping f^. 

3. The encoded codeword is c = ci + • — h c u G .M. 

Since CG(V m ) can be decomposed into a direct product of subspace 
subcodes, we show that we can go further in the decoding and that it is 

def 

sometimes possible to decode beyond the error-correcting capability C = 
l(d — l)/2j of the code. Let the received vector 

where c G M. and e is some error-vector of rank less than t. Let yj be the 
projection of y on subspace V mi . We have the following set of equations 

!yi = ci +ei, ci G {Q\V mi ), 
Yu = c u + e u , c u G (Q\V mu ). 

where, for all i = l,...,u the rank of e; over GF(q) is less or equal to 
t. Therefore, if t < C the y^'s are decodable in their respective subcodes 
(G\V mi ). Hence y is decodable in M.. Moreover, even when Rk(e) > C, it 
is sometimes possible to decode successfully. This corresponds to the case 
where Rk(ej) < C for all i = 1, . . . , u. 

We study occurrences of such case. We want to find an estimation of: 

Pdecoding = Pr(Rk(ei) < C, . . . , Rk(e u ) < C) \ Rk(e) < t), 

which quantifies the probability of successful decoding in M.. 

Let iV = J2i"=i m i> an d let us consider the error- vector e as the q-axy 
N x n matrix corresponding to the expansion rowwise of the components of 
e on the basis of the iV dimensional vector-space V mi © • • • © V mu with basis 
(h>i, . . . , b n ). This gives the following representation for e 
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where ej'a are g-ary matrices of size mi x n. We suppose that e T is of rank 
< t, where t is some integer. 

Matrix e T can be transformed into a vector E = (Ei ■ ■ ■ E„) with compo- 
nents in GF(q n ) by considering any of its columns as the coordinates of an 
element of GF(q n ) on a basis of GF(q n )/GF(q). This implies that Rk(E) < t 
if and only if Rk(e) < t. In particular there exist a\, . . . ,at € GF(q n ) t lin- 
early independent over GF(q) satisfying 

E = (ai, . . . ,a t )S, 

where S is a t x iV-matrix over GF(q) of rank less than t. Consider the 
decomposition of S = (Si ■ ■ ■ S u ), where S% are t x rrn <?-ary matrices. We 
have 

{Ei = («i, . . . ,a t )Si, 
E u = (ai, . . . ,a t )S u . 

Since the transformations from e, to Ej are one-to-one and preserve the rank, 
and since the rank of Ej over GF(q) is equal to the rank of Sj we have 

Pdecoding = Pr (Rk(Sl) < C, . . . , Rk(5 u ) < C) | Rk(5) < t). 

Matrix S being of size t x n, the conditioning on the rank of 5 is always 
satisfied. Therefore we can remove it and we obtain 

Pdecoding = Pr(Rk(Sl) < C, . . . , Rk(S u ) < C)). 

The events being independent, this is equivalent to 

Pdecoding = Pr(Rk(Si) < C) • • • Pr(Rk(S u ) < C). (2.11) 

The number J\fc(m, t) of t x m q-ary matrices of rank C is given by the 
formula, see ^2] page 455 for instance: 

Nc{m,t) = H -q . 

to « " 1 

This quantity can be approximated by q( m + t ) c - c2 +i 1 +0(q 2 ) ^ Therefore 

Pr(Rk(Si) <C)= q (rm-C)(C-t)+ q -i+0(q-*) ^ (212) 

Hence from H2.11II and H2.12I) we obtain 
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Proposition 4 (Probability of successful decoding) 

Let M. = (Q\V mx ) © • • • © (G\V mu ), be the code formed by the direct sum 
of subspace subcodes of maximum rank distance codes with error- correcting 
capability C. Then the probability of success for decoding t > C errors satis- 
fies 



p _ -(N-C){t-C)+uq-^+0{q- 2 ) 

± decoding H i 



where N = Ya=i m i 



3 A particular case: subfield subcodes 

Subfield subcodes are special cases of subspace subcodes. In Hamming metric 
constructing a parity-check or generator matrix for these codes by using 
properties of the Trace operator is easy, What is less trivial is 

computing the exact dimension and exact minimum distance of the codes. 
Generally speaking, only bounds are available. 

Section|2]showed that the exact parameters could be obtained very simply 
for the family of MRD-codes with parity-check matrix H~2l Namely, subspace 
subcodes are isomorphic through a rank preserving bijection to MRD-codes 
of the same family but smaller parameters. This implies in particular that 
subspace subcodes are optimal for rank metric. 

In this section we go one step further and show that, given a subfield 
GF{q s ) of GF(q n ) specified by a chosen basis, there is a unique subfield 
subcode modulo transformation by the group induced on the components of 
the code by the general linear group GL n (GF(q)) of of g-ary non-singular 
matrices of size n x n. We prove the following theorem. 

Theorem 1 

Let Q be a code over GF(q n ) with parity-check matrix Let s be a 

positive integer dividing n and let 

a s \ 

[d-2] 
■s / 

where the <2j £ GF(q s ) C GF(q n ) for all i = 1, . . . , s are linearly independent 
over GF(q) . 

Then, there exists a unique matrix S € GL n (GF(q)) of size nx n such 



A 



\ a i 



[d-2] 
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that the subfield subcode (Q\GF(q s )) has parity-check matrix 



(A ••• \ 
A ■■■ 

^ ••• A ) 



S, 



Proof. 

Q has parity-check matrix 111. 2(1 which can be rewritten 



H 



/ h \ 

h [d-2] 



where \M = (hf\ ■ ■ ■ , tin )• One obtains a parity-check matrix of (G\GF(q s )) 
by the following procedure: 

• Choose a basis of GF(q n )/GF{q s ). 

• Expand each line of matrix H onto GF(q s ) with respect to this ba- 
sis. Every line of length n with coefficients in GF{q n ) is transformed 
columnwise into a matrix of size n/s x n, that is 



h 



1,71 



h = (hi, ...,h n )^H 



h 



n/s,l 



h 



n/s,n 



However, since H is composed of lines obtained by the action of powers of 
the Frobenius automorphism on the components of h, for all i = 1, . . . , d — 2, 
there exists a n/s x n/s non-singular matrix Qi with coefficients in GF(q s ) 
satisfying 



hi 



where Tv® denotes matrix Ti whose components have been elevated to the 
power q % . Therefore, a parity-check matrix of (Q\GF(q s )) has the form 



/ n \ 

WW 
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Next, since the columns of Ti have rank n over GF(q) (the /ijS are linearly 
independent over GF(q)), there is a nxn matrix S with coefficients in GF(q) 
such that 

( ai • ■ ■ \ 
a 2 •■■ 



\ 



where, for alH = 0, . . . , d — 2 

a; = (e^i, . . . , Oj )S ), ajj G GF(q s ) 

is a vector formed with linearly independent elements of GF(q s ). Provided 
d — 2 < s the following matrices 



( 



\ 



\ 



\d-2] 



for i=l, 



,n/s 



are generator matrices of a [s,s — d + l,d] MRD-code over GF(q s ). This 
implies the existence of a permutation matrix P such that 



H„s — 



/ n \ 

[ H [d-2] J 



= P 



To complete the proof we have to remark that, multiplying a parity-check 
matrix on the left by any non-singular matrix doesn't change the generated 
code. Hence a parity-check of (Q\GF{q s )) is 



/ Ai 



V • • • A n/S J 



def 



If A = Ai, for all % = 1, . . . ,n/s there exists a non-singular matrix Pi over 
GF(q s ) such that A = Pi A. Hence 

/ Ai ■■■ 



V o 



An/s 



( Pl 

V o 




o \ 

A J 
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and a parity-check matrix of (C\GF(q 3 )) is 




This completes the proof. 

The theorem means that, somehow, the subfield subcode of a maximum 
rank distance code of full length (i.e. the length of the code is equal to the 
extension degree) is a direct sum of maximum rank distance codes taken over 
the subfield. 

It also implies that, whatever the MRD-code over GF(q n ) be, if we fix a 
basis of GF(q n )/GF(q s ), then the subfield subcode is uniquely determined 
by a q-ary invertible matrix S. 

Prom proposition 0] we deduce the following corollary 

Corollary 3 (Successful decoding of subfield subcodes) 

Let C be the error- correcting capability of Q, then the probability of de- 
coding t > C errors in (Q\GF(q s )) is equal to 

p. .. - (7 -(n-C)(t-C7)+f g - 1 +0(g- 2 ) 
± decoding H i 
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